AariaSec Field Notes — AI Agent Incident Intelligence

AWR Quick Reference

AWR-001

Prompt Injection Attempt

Sudden tool-call spike, unusual token ratios, new egress destinations appearing simultaneously.
AWR-006

Agent Impersonation

Behavioral fingerprint deviates sharply from baseline — possible agent hijacking. Mahalanobis distance exceeds threshold.
AWR-100

Quality Degradation (Compound)

Compound response-quality degradation across session. Fires when coherence decline persists beyond transient noise.
AWR-108

Token Spend Anomaly

Abnormal token consumption pattern relative to session baseline, suggesting flooding or runaway loop.
AWR-111

Injection → Exfil Chain

Prompt injection followed by new tool call and egress — confirmed multi-step exfiltration chain.
AWR-112

Credential Harvest Chain

PII/credential detection followed by egress to new host — credential exfiltration chain.
AWR-113

MCP Privilege Escalation

MCP call → authority exceeded → unauthorized tool call. Privilege escalation chain.
AWR-114

Reconnaissance Staging

Rapid tool diversity → large response → egress. Reconnaissance and staging chain.

Full AWR Rule Library

270+ detection rules with severity tiers, detection logic categories, and recommended controls — all of them ship in the free download and run on your own machine.

Download free →

No account, no commitment. Nothing leaves your machine.

This page summarizes public reporting and research. AariaSec mappings are analytical references, not claims about any specific deployment.